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We study the relation between semi and fuUy device independent protocols. Our work leads to 
new random number generating protocols with higher rates for both scenarios. As a tool we use 
the correspondence between Bell inequalities and dimension witnesses. We present a method for 
converting the former into the later and vice versa. As a byproduct we obtain whole new classes of 
inequalities and witnesses. Finally, we show how optimization methods used in the studies of Bell 
inequalities can be adopted for dimension witnesses. 
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Introduction - In the device independent (DI) proto- 
cols the parties do not know all the relevant parameters of 
their machines or do not trust them. It was formally pre- 
sented in ^ . First this approach has been very successful 
in the quantum cryptography ^-^5.] . Later Colbeck 0] 
has proposed the true random number expansionproto- 
col based on the GHZ test and Pironio et al. [8| have 
proposed the protocol based on the Bell inequality vio- 
lations. All these protocols require entanglement which 
has the negative effect on the complexity of the devices 
and the rates of the randomness generation Q . 

To cope with this problem the semi-device indepen- 
dent(SDI) scenario was introduced in Q. In this ap- 
proach we consider prepare and measure protocols with- 
out making any assumptions about the inner workings 
of the preparation and measurement devices. The only 
assumption made is about the size of the communicated 
system. In each round of the experiment we assume it 
to be a single qubit. This approach is a very good com- 
promise between the fully DI scenario and and the ex- 
perimental feasibility. The first SDI protocol, presented 
in was for quantum key distribution. Shortly after- 
wards, the first SDI randomness expansion protocol has 
been proposed fioj. 

In this work study the connection between DI and SDI 
protocols. We show how and under which conditions one 
can be converted into the other and how this change af- 
fects their parameters. 

Our paper is structured as follows. First we describe 
the method for converting DI protocols to SDI and vice 
versa. Then we apply our method to SDI randomness 
generators to obtain new DI protocols with higher bit 
rates. We also present a new family of Bell inequalities. 
Next we go the other way round and take DI protocol and 
turn it into SDI one again with better rates. This time 
our byproduct is a new family of dimension witnesses. 
Finally, we show how semi definite programming (SDP) 
methods that are a powerful tool in DI scenario can be 



used in the SDI one. 

Bell inequalities and dimension witnesses - In DI pro- 
tocol the parties receive systems in an unknown entan- 
gled state from an untrusted sender. In each round they 
choose their inputs and make measurements to obtain the 
outcomes. In our paper we are interested with bi-partite 
protocols, so we have two partners: Alice (with her set- 
ting choice denoted by x and the outcome by a) and Bob 
(with y and b respectively). In some, randomly chosen, 
rounds of the protocol both parties will publicly compare 
their settings and outcomes to estimate the conditional 
probability distribution P{a,b\x,y). From this they cal- 
culate the value of some Bell inequality 



^ = X! '^a,b,x,vP{a,b\x,y), 



(1) 



which is their security parameter. This parameter can 
be then used to lowerbound the amount of randomness 
or secrecy in the remaining rounds. 

In SDI protocol Alice chooses her input x' but she does 
not have any outcome. Instead, in each round she pre- 
pares a state depending on x' and sends it to Bob. Bob 
chooses measurement setting y and obtains the outcome 
b. The devices that prepare the system and then measure 
it are not trusted but we assume that the communicated 
states are described by Hilbert space with a fixed dimen- 
sion (here we assume they are qubits) and that there is 
no entanglement between the devices of Alice and Bob. 
Again in some rounds x',y and b are announced to esti- 
mate the value of some dimension witness 



W=Y^ Pb,.',yP(b\x',y), 



(2) 



which has exactly the same function as / in the DI case. 
Both these scenarios are sketched in Fig. 1. 

Dimension witnesses have been introduced in pTj . Just 
as violation of Bell inequality, in DI case tells us that the 
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FIG. 1: Schematic representation of DI (1) and SDI (2) pro- 
tocols and our method of finding the corresponding ones. 



measured system cannot have a classical description the 
violation of dimension witness, in SDI case tells us that 
the communicated system cannot be a classical bit (in 
the case of the witness for dimension 2). In both cases 
the violation of the classical bounds is necessary (though 
not always sufficient) condition for the protocol to work. 
And in both of the cases the form of J or are the 
most important part of the protocol's description. There- 
fore, finding correspondence between these two objects is 
equivalent to finding correspondence between the proto- 
cols. Our method of doing so is quite straightforward. 

Let's rewrite / as J2a,b.x.,y'^a,b,x,vPia\x,y)P{b\a,x,y) 
and start considering a as a part of Alice's input. This 
is purely mathematical operation, it has no meaning at 
the level of protocol. Now Alice's input is x' = (x, a). 
We can consider P{a\x,y) as the probability of part of 
Alice's input to be a. Because in the parameter esti- 
mation phase of the protocol the inputs are chosen ac- 
cording to uniform distribution we put P{a\x, y) — ^ 
where A is the size of the alphabet of a. Our / now is 
J2b,x',v^b,x',y-jP{b\x' ,y) and has the form of ^ with 

Pb,x',y = -jOib,x'.y Our method is quite heuristic and 
there is no guarantee that a Bell inequality with quan- 
tum bound higher than classical will lead to a dimension 
witness that can be violated. Also using it to go from di- 
mension witness to Bell inequality is not always possible. 
To do so one has to divide Alice's input x' into a pair: 
setting and outcome. This is only possible if the alphabet 
of x' has composite size. These are serious drawbacks but 
they are easily outweighed by the advantages: it's simple 
and it works! In the following paragraphs we apply it to 
generate new useful witnesses, inequalities and protocols. 

From SDI to DI protocols - Let us consider the family 
of SDI protocols for randomness generation introduced 
in [l^ . which are based on n -t- 1 quantum random ac- 
cess codes [l^. Alice's input x' is a collection of n inde- 
pendent bits ao,...,a„_i. For Bob y — 0, ..,n — I. The 
dimension witness is defined by lib,x',y = 5a ,6- There 
are many ways of dividing Alice's input into the pair of 
settings and outcomes, but because of the independence 
of the bits, they are all equivalent. Let us then take the 
outcome a to be ao and the setting x to be oi, ...,a„_i. 
In this way we obtain the new family of Bell inequalities 



In^ ^ 5a^.bP{a,b\y,x). 

a.b,x,y 



(3) 



plement entanglement assisted random access codes [TJ] . 
In these codes Alice has n independent bits and Bob is in- 
terested in only one of them. Alice can send to Bob only 
one bit of classical communication but they can share 
entanglement. If we denote the bits that Alice want to 
encode by co,...,c„_i. Then Alice can choose her set- 
ting by taking = Ci © cq for all z > and transmit 
the message m = a © cq to Bob. If he XORs his out- 
come b with the message it is easy to calculate that he 
obtains the correct value of Uy with average probability 
Pn — Therefore, we see that there indeed exists a 

correspondence between the dimension witness and Bell 
inequalities related by our method also at the level of pro- 
tocols. In this case they both are a measure of success 
probability in different kinds of random access codes. 

I2 is equivalent to CHSH inequality. However, the 
members of this family for n > 2 have never been studied. 
Because it is possible to use them for entanglement as- 
sisted random access codes, the bound on their efficiency 
derived in apply and, they translate to maximum 

quantum value of F„ to be P™°^ ^ ^ + -j=^. 

Now let us see how our new Bell inequalities per- 
form in DI randomness generation. The quantity that 
we want to optimize is the min-entropy Hao{cL,b\x,y) — 
— logmaxa, b P (a, b\x,y). To lowerbound its amount for 
a given value of P„ we use the methods described in [l^ . 
More precisely, we bound the set of allowed probability 
distributions by the second level of their hierarchy. We 
have obtained the following lower bounds on the min- 
entropy for the maximal quantum values of P„ : 



n 


DI: Hoo{a,b\x,y) 


SDI: Hoo{b\x,y) 


2 


1.2284 


0.2284 


3 


1.3421 


0.3425 


4 


1.4126 


0.1388 


5 


1.4652 


0.1024 



Systems obtaining high value of /„ can be used to im- 



TABLE I: Lower bounds on min-entropy Hao{a, b\x, y) for the 
maximal quantum values of Bell inequalities In obtained using 
semi definite programming. They are compared to the bounds 
on the SDI protocols from J2,], from which they were derived. 



Comparing to the randomness obtained from the SDI 
protocols the main difference is that it grows with n 
instead of reaching maximum at n = 3. In fact the 
upper bound is Hoc,{a,b\x,y) = 1 — logP™'^'^ — 2 — 

log ^1 -I- , which goes to 2 as n — > 00. We conjec- 
ture it is reached for any n but the second level of the 
SDP hierarchy form [l^ that we use for the lower bound 
is sufficient only for n = 2. Proving this conjecture is one 
of the open avenues of research. The lower bounds as the 
function of P„ are plotted in Fig. 2. 

From DI to SDI protocols - Now we apply our method 
to convert DI protocol to SDI one. We start from the 
randomness generation protocol form [T^ based on Bell 
inequality /q,, which expressed in the form ([T]) is 
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FIG. 2: The lower bounds on Hoo{a., b\x, y) as the function of 



-f" = T.a,b.,y 5a.baP{a, b\x = 0, y) 

+ Ea,b,a 5a,b®yP{a, h\x = 1, y) . 

Converting it to dimension witness we get 



(4) 



^P(6|a,x = 0,y) 



'-P{b\a,x^l,y). 



(5) 



The lower bound on min-entropy as a function of co- 
efficient a is plotted in Fig. 3. For large values of a the 
amount of randomness is clearly greater than for the best 
of the protocols described in 

Previously [l^, Ell , the bounds on entropy in SDI pro- 
tocols have been obtained with Levenberg— Marquardt 
algorithm TtII which is not guaranteed to find global min- 
ima. SDP on the other hand always finds it but it was 
not known how it could be applied in SDI case. Below 
we give a solution to the problem. 

Optimization in SDI protocols - It is not possible to 
use SDP optimization in SDI case directly because of 
the nonlinear target function. Methods from also 
cannot be applied because they do not allow for choosing 
the dimension of the system. Therefore, we need to find 
another solution. It is sketched in Fig 4. 

Every SDI protocol can be realized in the following 
way. Alice has a pair of systems in a singlet state. If she 
wants to prepare the state 10), she measures one parti- 
cle in the basis {|(/)), the other will also collapse to 
one of these states. Basing on her measurement outcome 
she either sends the other particle to Bob unchanged or 
performs unitary that flips \4>) to and then sends 
it. If the Bob's measurement outcomes are binary Alice 
does not have to perform this unitary at all. She can 
just send her measurement outcome to Bob (0 meaning 
[(/)) and 1 standing for !</>''")) who after XORing it with 
his outcome will get exactly the same probability distri- 
bution P{b\a, X, y) as in the initial SDI protocol. These 
two cases are marked by letters (A) and (B) in Fig. 4. 
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FIG. 3: The lower bound on min-entropy Hoo{b\a,x — l,y) 
as a function of coefficient a for the maximal quantum value 
of Wa- In [31 large amount of randomness is generated only 
for one setting x. Here we observe the same result for with 
large randomness for x = 1 and low for a; = 0. 







FIG. 4: The sketch of the method for lowerbounding the en- 
tropy in SDI protocols with SDP. See text for detailed de- 
scription. 



Obviously, nothing changes if the source of the singlet 
states is outside Alice's lab and she is only the receiver of 
one subsystem just like Bob. This is depicted in fragment 
(C). But a lot changes if we now assume that the state 
that they receive can be arbitrary maximally entangled 
state of any dimension (D). However, this only enlarges 
the space of allowed probability distributions P{b\a, x, y), 
so any lower bound on the entropy in case (D) will also 
hold in (A). Finally, (D) is just the description of DI 
protocol with some additional assumption on the state. 
We can lowerbound the entropy in this case with the 
SDP-based methods from [l5| and the fact that the state 
is maximally entangled will be reflected by adding the 
constraints \/x,yP{a\x,y) = ^. 

We now have 



H^\b\x,a,y)>H(^\b\x,a,y) 

= — log maxP^^-' a, 7/), (6) 

b 

with P^^\b\x,a,y) = ""pZ^l'l^^ = 2P(^){a,b\x,y) it 
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gives 

H^^\b\x,a,y) > -I - logm&x P^^'> {a, b\x,y) 

b 

>H(^Ha,b\x,y)-l (7) 

The above formula implies that the randomness ob- 
tained in SDI protocol is greater form the one in its DI 
counterpart minus 1. Let us stress that ^ holds only 
when the value of the dimension witness and Bell in- 
equality are the same. Let us take a look at table 2. 
again. For n = 2 we have equality Hca{b\x, a,y) = 
Hao{a,b\x,y) — 1. For n = 3 Hao{b\x,a^y) is slightly 
larger than Hac,{a, b\x, y) — 1. This most probably stems 
from the fact that the bound in the table is not tight 
for n = 3. In fact, the upper bound on Hao{a,b\x^y) 
is exactly H^{b\x,a,y) -\- 1. The situation changes for 
n = 4, 5. In these cases ([7]) does not seem to hold. This 
is because the values in the table are given for the maxi- 
mal quantum values of witnesses and inequalities which, 
for n = 4, 5 are not the same. If we calculate the entropy 
bound for the DI case when the value of Bell inequality 
is equal to the maximal quantum value of the dimension 
witness then the values are in agreement with ([7]). 

Using this method we were able to refine the results 
form flOl]. They are presented in Fig. 5. 
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FIG. 5: Min-entropy bounds for SDI randomness genera- 
tion protocol based on 2 — >■ 1 quantum random access code. 
The red points are based on Levenberg— Marquardt algorithm 
used in [IQ] which is not guaranteed to find global minima, 
while the blue line is based on SDP method described here. 
Note that the state preparation in SDI protocol has the as- 
sumption p(a\x,y) = ^. 



Conclusions - We study the relation between DI and 
SDI protocols. Though we have focused on randomness 
generation our results also apply to quantum key distri- 
bution since all of the state-of-the-art proofs of security 
are based on the randomness of the measurement out- 
comes ^,i4s]. To this end we have demonstrated a method 
of converting Bell inequalities into dimension witness and 
vice versa. This has allowed us to generate new exam- 
ples of both types of the objects with very interesting 
properties. Our new family of Bell inequalities gives rise 
to DI randomness generation protocols with better bit 
rates. Our family of dimension witnesses does the same 
for the SDI protocols. Finally, using the correspondence 
between DI and SDI approach we were able to modify 
SDP-based methods which were proven successful in the 
former case to work in the later one. 

Apart from similarities our studies have also shown in- 
teresting differences like the completely different depen- 
dance on n in Table 2. Also they have introduced many 
new protocols for both scenarios. Comparison of their ef- 
ficiency with the existing ones, especially in the presence 
of noise and imperfect detectors, presents a new area of 
research. 
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SDP has been implemented in MATLAB using toolboxes 
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